encoding information in a way so that it can only be decoded if a secret is known; used to prevent exposure of data to other parties
13
votes
7answers
5k views
Linux boot loaders supporting full disk encryption?
Are there any Linux boot loaders supporting full disk encryption (a la TrueCrypt). I know there was work towards adding encryption support to GRUB2, but this does not seem to be ready yet. Any other ...
12
votes
4answers
5k views
SSH to decrypt encrypted LVM during headless server boot?
When I installed Ubuntu 10.04 and, now, 10.10, I was offered the option of enabling "encrypted LVM" for my hard drive.
After choosing that option, I am prompted for my password during boot to decrypt ...
11
votes
3answers
4k views
How should one set up full-disk encryption on OpenBSD?
Is there a preferred method to set up full-disk encryption under OpenBSD, similar to dm-crypt under Linux?
I'm looking for full-disk encryption, as if someone were to steal my notebook they could ...
9
votes
3answers
2k views
Full disk encryption with password-less authentication in Linux
I have a fairly standard disk encryption setup in Debian 5.0.5: unencrypted /boot partition, and encrypted sdaX_crypt that contains all other partitions.
Now, this is a headless server installation ...
9
votes
3answers
564 views
Portable encrypted container
I want to store some data encrypted to carry around with me (this includes some scans of relevant paperwork, my TAN List for online banking, my gnupg and ssh keys and stuff like that). So not really a ...
7
votes
3answers
3k views
Encrypting file only with SSH -priv-key?
Suppose I want to encrypt a file so that only I can read it, by knowing my SSH private key password. I am sharing a repo where I want to encrypt or obfuscate sensitive information. By that, I mean ...
7
votes
2answers
581 views
What encryption does vim -x use?
I read man vim, :h -x and :h encryption none of this actually says what algorithm it's encrypted with.
7
votes
3answers
2k views
Simplest way to password protect a directory and its contents without having to create new files?
I would like to password protect or encrypt a directory and all the files within it (for the whole directory tree below it). I do not want to bother the whole home directory, I want a specific ...
7
votes
3answers
686 views
Encrypt OfflineIMAP Password
I'm trying to set up OfflineIMAP to authenticate via a gpg encrypted file (that way I can consolidate all my encryption to my gpg-agent process).
From the documentation, it seems the only way to ...
7
votes
4answers
1k views
Receive Pop/IMAP email and then forward as encrypted to gmail
Basically, I have an email account I can access as POP3 or IMAP. I want to take all incoming emails, encrypt them, and then forward the encrypted version to my gmail account (so I can see the ...
7
votes
1answer
271 views
Encrypted Booting
I want to boot the Linux from the /boot partition, and also want to encrypt this /boot partition.
[ AFAIK, Grub is unable to find the kernel and initrd from an truecrypted partition or cryptsetup ...
7
votes
2answers
125 views
Signing/Checksumming the kernel to prevent/detect manipulation
All my partitions are encrypted (/ and /home), but the /boot partition has to remain unencrypted and is open for manipulation. I was thinking about hashing the kernel on bootup and checking the result ...
6
votes
3answers
545 views
Any reason for encrypted /?
I am a big fan of linux and like trying out new distros now and then. I usually have my home folders and roots in a lvm atop an encrypted partition, but this tends to become cumbersome with every ...
6
votes
2answers
522 views
I/O-overhead of dm-encrypted device?
What would be the Read-/Write-overhead when using dm-crypt (LUKS) as full disk-encryption (including root partition) on a Linux-Desktop (Ubuntu)?
I plan to stack it like so: LUKS > LVM > ext4
The CPU ...
6
votes
2answers
346 views
How does pre-boot authentication with disk encryption work technically?
I'm looking for a solution to fully encrypt my dual-boot SSD drive (it's still new and empty, and I want to set up encryption before I put anything on it).
While there's a lot of chaos on the web ...
